Anatomy of a Cross-Site Scripting Flaw in the Telerik Reporting Module
veracode.com